Recording industry Web site offline

MyDoom virus may have targeted anti-piracy site

Below:

Next story in Tech and gadgets

LOS ANGELES — The Web site for the recording industry's anti-piracy lobby has been inaccessible for several days, possibly the victim of a computer virus specifically targeting the site.

The Recording Industry Association of America's site at riaa.com was among the targets named in the "MyDoom.F" virus, which Internet security firms spotted last month. The site has been down since Wednesday and remained offline Monday.

"We are working on getting it back online," RIAA spokesman Jonathan Lamy said, declining to elaborate.

The virus was programmed to activate between the 17th and 22nd of any month, said Vincent Gullotto, vice president of McAfee's antivirus emergency response team.

It's not clear whether the virus actually caused an Internet traffic jam that shut down the site, or if the RIAA opted to take the site down in anticipation of the virus' activation.

Upon activation, the virus performs a so-called denial-of-service attack, in which machines infected with the virus continually send bogus Web traffic requests to the RIAA site, overwhelming it so it can't handle legitimate requests.

"It's impossible to filter the traffic because it looks identical to the same type of traffic generated by a regular browser," said Tony Magallanez, systems engineer at F-Secure Corp. in San Jose. "You get to a point where if enough machines become infected it can overwhelm pretty much any connection."